Security & privacy

Law Insider does not use your content to train AI or machine-learning models, and requires the same of its third-party providers. This commitment is written into section 6 of the Terms of Service.

Documents you upload for your work stay private to your workspace. They are kept separate from Law Insider’s public contract database, and customer data is logically separated so other customers cannot access it.

We comply with GDPR and CCPA. Our DPA protects personal data with TLS 1.2 or higher in transit and AES-256 or equivalent encryption at rest. Access is limited to authorised people with a business need and confidentiality obligations.

Some workflows process documents only while needed; others retain authorised contracts and metadata for repositories, search and ongoing work. We never retain documents beyond what’s required to deliver the service. Secure cloud hosting offers regional options where available. Automated backups and disaster recovery support uptime and resilience. AI providers use zero-retention or equivalent controls where supported.

You can remove Law Insider documents at any time. After account closure, remaining data is purged within 30 days. SimpleDocs generally removes active-system data within 30 days of termination; limited backup and legal retention can apply.

Our defence-in-depth approach protects infrastructure, applications and access. SimpleDocs maintains SOC 2 Type II attestation, assessing controls over time. Its Trust Center provides current reports and security policies for review.